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£i§jKT>5|fSltf)iii3R§§^ 

ft»£«£t-*a»58£^a.i:, ql (ql»K) CDV 

coS^t— y;i/co*co iffi£M#rt£ltiRis£> 
A, 

[is*^3] &»£*£t-£SLR58£^a£:* at^jjc 20 

^{ba<h£AAfei®^bggx&oT> 
aaE**<ortf^fta<o»^^ a* 

»»**¥at» SlOA*i:»2 0AAa)*««ii 

t a* tommftmrnft * t. z>m vmrn mmmm^& t . 
««««¥at, mi(DAt}£m2 0)At}wmmmm 



2 

[0 0 0 1 ] 
[0 0 0 2] 

[ooo3] m^mmte* mmm&^&rcmmmm$:, 

«f-%X«A^nJK&«*^6J6«-r*. Bg^«M^ 1 o 
T&£S^»#r*fc§^\ Paul Kocher, Joshua Jaffe, a 
nd Benjamin Jun, "Differential Power Analysis" in 
proceedings of Advances inCryp to logy — CRYPTO' 9 
9, Springer-Verlag. 199 9. pp. 388-397 

^tm&M^nMJjizmmT^&o 
[0004] mttmrnzmizte, mmmtjmm (ht. 

SPA^t^) (Single Power Analysis) ^Q^lSMtJ 
mftlkm CWT, (Differential Power 

Analysis) #*&3:*l£>. S P Afifft^^D-fe «y1t(r*5 

PA(DM^Tfe5, 

[0 0 0 5] ^J^tfRS A^POiiKftBS-^dit-r^DP 
A^, Thomas S. Messerges, Ezzy A. Dabbish 

and Robert H. Sloan "Power Analysis Attacks of Mo 
dular Exponent i t iat ion in Smartcards" Cryptograph! 
c Hardware and Embedded Systems (CHES' 9 9), Spr 
inger-Verlag. pp. 1 4 4 - 1 5 7 lCiB«2ftT^5o 
^m^^^<omfE<omm<Dr>ES (Data Encryptio 
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n Standards) CW^SPA^^DPA^ Paul Ko 
cher, Joshua Jaffe, and Benjamin Jun, " Differentia 
I Power Analysis, " in proceedings of Advances in C 
ryptology-CRYPTO' 9 9, Springer-Ver lag. 199 

9. pp. 3 8 8 - 3 97 lClH«S$tlTl^. *ii»«P-^ 
tt<D$:1ttftmm£:fcK)o2>7'( >t-)V (Rijndael) 
Si:J*T5DPA^ WAH S. Chari, C. Jut la, J. 

R. Rao. P. Rohatgi. "An Cautionary Note Regardin 
g Evaluation of AES Candidates on Smart-Cards/' S 
econd Advanced Encryption Standard Candidate Confe 10 
rence, March 1 9 9 9 tCiBWSftT^So 

[0 0 0 6] z<D&oiz, mtiMtitikmcDtp-cbVP A 
[0007] uPA&mm^mte#mmm^<Dmn<D& 

l»&i**«8«t4. 02, 3*5<fctf4H 
#&MV%nT*m^t>nz>mW (operations) -C&£HX 

or (mmwmwm > nwmm^mmmmm^ 

tlffl/TlTl^o 20 

[0 0 0 8] El 2 (C£>^T, iXORHAAf-^X i 
<&Stfif«K i chOSfffiM^SIfP (XOR) (DtitfjZ i * 
«S&"T^)a ({lb, igffXORte0ffi;fccfctfStTtt. O 
£ + £^/£L;^S/>4^T^2nT^£o ) m 3 (C:fc^ 

fcttiaZi=L (Xi) SfttefS. d^T% {£lc<7)x 
y KO<,>TL (xXORy) =L (x) XORL 
(y) "C&>5o JlJ^JfelcH t*y hfe* (permutatio 

»wn x/j^-^x i zimmmmLxihti z \ =w 30 

(Xi) ffi*©xJ;«yl:^^T 
W (xXORy) (x) XORW (y) "e&^o $E 

LtfLtfffll^ A^X£X = {xu-i, . . . , 

xi, xo) (ute&mm <tumtzftmv, sbox 

T^wi (i=o — u) ^|^tzi=wi (xi) 
SrSSffU Z= (zu-i. - . zizo) ch LT^p * 



*LTffl#Z 

[0 0 0 9] *ffl«tt#a*«r**-Ctt. ^ne^iixo 

&t>i*:T&5V> KBBScSrlftBKU -£-co J: 3 & 5 ^ > K 
Hft$JB(c:J&ft|p] (^>K) ^OiMTo 
[0 0 10] DPA«C«t****»a**|HWr-6. D 

v-^>X£^fcA#¥:££A^— h^J— K^cofft^ 
ffcSi tc y'J7;H: IT, f 0 *6mt D -fe y +r (c J: 

filfti^^o 0 7 (A) tt-t<0«t-5tt«*ffl*ftj» 

*«*lt^5. wsasAATXicjjbT-toaDe*- 

[0 0 11] *t«*«»fflieS:flBlrifc»<Z)<|f«T*KW 
T£ 0 B5I1 ^S«SB!<0^<7)»XORjg[SC (0 2) <h 

imwmm (^4) om^-tiT^^^ft^^j^^bT 

^COfff^ttC^f^DP A^rlKHJ-r^o 1611 

t}¥-3L\Z$>rtZ>WL%\<D$k\±v hMmi tL, **n(£>g| 

K*c:fcM-*S*«£k i (K= {ku-i k 

i, ko) 1 rDOimm) £U M^Sboxf 

-^H^ttStlftHRSwichl^ tH^^rzi ( = w 
i (miXORki) ) cfT*. DP ACDfc&lZ* 

tlfck i ' t^bz i' =w i (m i X O R k j ) £ 

ssit, «^^n7ck i 

«©SM^Go (k i ' 
[0 0 12] 

mi] 



IzZiTZM&G (k i * ) 
) feckiXG i (ki' ) i: 



[»2] 
[0 0 1 



G 0 (k*i) = { G| *\ = w/m,® k'^COm e tf?CE> tf^v h flfi^O } (l) 
G| OCi) — { G I z\ = w^m,® k'^S© e «<Z> If ~y > (2) 

g^f&T&D, eil^LSB^lt ^A^SflS^DG (k 

3] #^-e> te^n^k i ' fc**-<r*#:<D«* 



ett. 



(3) 



[0 0 14] 07 (A) teGiicS-r5«*rB»ffii»a> 

¥i^fi*m»ffl«^0U^LT^^o 07 (B) \ZGo\Z 



(B) 



50 



IP^ki' =kiT85«^:li 07 (A) t 
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(B) <7)M£:?tTi37 (D) 

CO i ictffak i fCt3^Tfi»«A«»ftjBS:*fi£-rs 
^drfCioT, *j»WfC«K*<JfK*fctt*5e (determ 
ine) T^Cch^T^^o 

[0 0 15] x £\z. k i ' =k it^^^l:, 
MDG (ki* ) lCX/W*a*«ft*£££K9rr 
£ 0 ki' = k i-Cfc£«^ (ki' ) io 

( 1 ) fecfc^ (2) tcS£oTffl»m^Go (k i ' ) * 

[0 0 16] ki' ^k i (Oif^te, K)£*nfc 

z i ' =w i (miXORki' ) £ J ttllZ%tfcTZ>'7 
□ -tr^itrttc^tt^^co^n^ncDz i =w i (mi 

xoRki) t&mm&fe<vT% m^nrzz -r fc# 

t^S (1) iSitXiC (2) Cf^TiTCOmiC^t 
**^G (ki') ^^5>«^Go (ki') fccfctfG * 



*&<£I/G i (k j ' ) \ZfttfZ>£, K^Lfc z i ' = w 
i (miXORki') tCftlzftfo'T&y'nlzv-tj-ft 
\Z&1,fZ>^m<Dz i =vv i (msXORki) <hrt*£T 

hHW (Hamming weight) (CM LT (4) 7^#£ 

>y hKllO 1) 2tf)/\^>^x-f hHWIi3t* 
HS4] 



0*> 

i (ki' ) ^»^tTt>, ^©^n^n^z i (EPts 

z i' chS^^tl^^^z i) lC#LTte2 0(Z)SB5> 
ll£ tC ^ > y A fc^tffc £ £ fC& £ <9 *C0^ (5) 

[ft 5] 



(5) 



[0017] J (4) «ut^^(iGo (ki' ) 
chGi (k i ' ) <DffiX*0)n— Kfiz iC0¥^IA^>^ 

• hc^t/if^i:^)^ it (5) #j*ar/r* 

ii^teGo (ki' ) tGi (k* ) oofpl-ccoa- KM 

[0018] z i =w i (x i ) T^£ft5^8lw 
fif-7>Sbox(7)Mz j — Kt^tC^o 

SttSr^t* IMM£*J&*. T. S. Messerge, Ezzy A. Dabb 
ish and Robert H. Sloan, "Investigations of Power A 
t tacks on Smartcards" Proceedings of USENIX Worksh 
op on Smartcard Technology, Mar. 1 9 9 9(Cf3iSc£ 

[00191^1, ki' -k it 
(4) ^«fc$n§^(h-CffiSf*^«Ai5Tft« 

±<7)x/w ^ti^^tc&^T^n^)^ a; (5) 
^tex/w^awrr, fttt3t¥^ffl^<h^^o dp a 

[0 0 2 0] B8H 04^B6^ft§g<7)HJ^tC2^CD^ * 



20 ★^lft^ii^Lfel«fiE^W-rSBff^fbggS:^bT^^« 
Li*J:rXL2S:tfy hgfiSiL, wi^DESCOS 
boxcht^t, [3 8<£>#tf&f3:DE SCOFHftt^HffitC 
fc&o DES0)tt.«{CO^m FIPS 46, "Data enc 
ryption standard" Federal Information Processings! 
andards Publication 4 6, U.S. Department of Comme 
rce/ National Bureau of Standards, National Techni 
cal Information Service, Springfield, Virginia, 1 

9 7 7 zmmznrc^o ms^mmh, ^ 6 chiwi^c^^ 

30 £ D 

[0 0 2 1 ] £l±<D^&kX\$, *8^«*OS box 
i( !:iki(DXOR(7)I (rnXOR^Wcomtf) tSb 

o x-\(7)A^Mx i izmlxdp AzmmTz^mbfo 
;KCctoT*oa: (6) ti$n^f^if^p-Kl 

#r**pJte«;:fc:*«^a*M. Akkar, R. Bevan, P. Discham 



p, and D. Moyart, "Power Analysis, What IsNow Poss 
40 ible. . . " Asiacrypt 2 0 0 OC^^T^^nx^ 

[ft 6] 



V(z) = a 5 + + a^i + ... + a 7 Zf + a^, + a^ft + - + hhh (6) 



nCDP A 

4 <DV%mt 



[0022] z\n^<D^mzxn\t. 
[0023] i . A*M**Rttd^a:»#^e*izaji 



Ml£ttMi&A<Dffil£?'( *>?lz*$V2> (Sboxwi 
[0 0 2 4] 2. A*M^K»^O*l»nffiET&0, M 

cco«€r, a 9 oasis** 
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CO) 

[0 0 2 5 ] 3. A*M^Rffl^OfWWprffiT*0, ft 

ft,&ca>df^< ^ >ifiz&tfz> (Sbox^wiH 

[0 0 2 6 ] »(DDPAM 

ic j * X*^»*« < c £ ic j; o T«#«W«<&ai5£fl| 

feco^LT. VX^r>^<hOf^nT^^Thomas S. Me 
sserges, "Securing the AES Finalists Against Power 
Analysis Attacks," in proceedings of Fast Softwar 
e Encryption Workshop 20 0 0, Springer-Verlag, Ap 
ril 2 0 0 0^^tltl^ o VX + >^ffi£te, Xti 20 

[0 0 2 7 ] *tC, a*'7Xj?ittl:'D^TR«t-& < 

[0 0 2 8] 02, 3i3<J:rX4JC*SnTli-5a*a)* 30 

[0029] aftvx^Mgrm, i»^b«c*ttsii« 
a^H^-* x i sti-g-r *tt:b o jc#ffi«isis»x i 

= Xi' XORRi^attXi' ^i;a»Ri^ir 

1 1, i3iil 2, ^04<!:B1 3t£?S£nT^ 

(operation) tc&tt^Xi. Xi' > Zi, Z 
i' , RifccttfROiCBLT. *CD^ (7) ^jsJESr. 

[ft 7] 

Xi = Xi'© Ri 

Zi = Zi'©ROi (7) 

[0 0 3 0] 0 2TIUAtX i £»K i tC*fLTZ i 
= X i XORK \f)mW2tlZ><DlZ*fLT* 0 1 ITU 50 



8 

3-t*fc», A^JlX i ' tlKiC^LTZi ' = 
Xi' XORKiXORRKi#iSS$ns, V 
X^M^tfctC&t^TR id:RKi^bROi=RiXO 
RRK itfmWZtl&o 

[ 0 0 3 1 ] 0 3 Ttt Z i = L ( X i ) <D&teE&iflft 

t>nz><D\z$tLT. m i 2<Df^mtmmx^tz \ • =l 

(Xi' ) tf^ffiWrton, 7X^i4fiET1JROi = 

l (Ri) ©*«*«tftona. 

[0 0 3 2 ] H4Tttwi, W2, • • wu-iT 

£>lC*fLT, 013 (A) (Df^mtmmX^t, 0c7)Ne 
wS b o x £m>fc®31iCcJ:oTR AM®«±l:w i ' 
l, wi' 2, • • wi' u - l T^£tl£>$r Lt^ 
Sbox«$tlT, ^*l*fflliT#«S*«IA*fTto 
*l£ 0 013 (A) ©VX^fit^WONe 

wSbox^fflWcffll^frbn, R i <hF*3p|$T^fej5)c£ 
tl^a^cRO i ^bw' i, w' 2> • • w' 

u-iiROi^$n^ 01 3 (B) ttNewS 
boxWPPIM$:glT!/^ 0 NewSboxH f*J 
BoaRXMtffl^TROittlSL. Sfc, Ri = 
riu-i - • • r i it iot, ROi = ro i 
u - l • • • roiiroio^ 012 (B) |*JT£! 
^btl<5Sbox, w i , W2> • * w u - i 
6, wi' j (x) =w (xXORr i j ) XORro 
i j ^l/ctw i' jSj=0, 1, * • • > u - 1 i,Z 

oiiTMi, fiTf^ROiiwi 1 j ^m^j-r 

[0 0 3 3] #fC, 3L$C?7,?mm<D$:±mZ'D\,*-Cffi 

mzmwrz* as^x^isic^^xn 01 o^ 

tfSTSftWt50 19^7^>H (&) tC4ott£0 
1 3 (A) &&Zf (B) <DS b o xCDw i ' T^aftMfiE 
ot^ftt^OT, DPAf:i5^TSbox(Z)rt$^a 

scita*-?*^. in^> waico^fr 1 tc^t^ s b o 

x fimWCfoZ t ^ 3 La^0)T, 0 8 (Dffl 

(1) *5cfctf (2) tCS£oTGo<hGiiC 

Mi^<0^ff2*5i:tf 3 tci5^^»XORg8ft«tB^;tc*3 
tt58S5£*t«*B:fcJ;tf S b o x^GDA^lC&tt^ffl!!^ 

^Mxco^tt), ««*«c*ft-r*a»s*^a» 

<5T, DPAl;»LT$4t^l)o 
[0 0 3 4] #fC, aftV^^fflffi^fflt,^Bg^fb^0iJ 

tit, ^-r yT-jim&mwt&o 01411 dp a 

^Itl^o Ng7^f>r-WIOSglt XORi 
ff, it^AW u b b y t e (Subst i tute Byt 
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e) , z/7 bmms hi ft, Mtf^X hn^Aja 
IM i x e d c o 1 u m n £^/vT^£o fl U Hf£<£ 

ec©h:7h*l:«l:^tR5lSn, Ksec#128k' 
yhOf^liN=10iL. 192t'7KOi6HN = 
12chL, 45cttK2 5 6 tf^ h<0»^ttN= 1 4 

KifiSt*® (sub-key) <hB*tfn5«T*5« El 
15H 7^f>fHH£©1 2 8/1 9 2/2 5 6 t'7 
hMiK s e c ^bN + 1 » 1 2 8 h'7 hffi^iK 10 

0, Ki, • • KN££j&t~>5ffi*l££fijc§§£^L 
T^c M8^5)ii;*aS:4filtt5*Stt> http://w 
ww. nist. gov/aes/^^^nxi^Ri jndael<^tttS»{caB 

[0 0 3 5 ] 016 tt-y-^/^-f h®S Subbyte^ 
^UT43D. 8t'7h-8e>yht«Sb 

0 xt^S^ffl^ 12 8^7^-12 8 tfy ME 
H»«*«:ff 5. El 1 7 te>-:7 bSELSS h i f t £r^U 

0 1 8(i^^7X hn^A£U3IM i x e d c o 1 20 

(2 8) ±<B8Uf€rff-5. 

[0036] B19I1 01 4cDil«0DNS^^r >a f — 

-Jl/ft^bTt^. il9(DNg7-f>r-^ffiH 
H*OJ:5&±«<^Na(Ol*#fbffla«<hT«©NR<0 

MlSubby teH 0 1 6 nt^5 «k 3 & 30 

ilT 1 6 i@CD Sbox:Si,o,Si,i, • • 

Si, i5^^T12 8e7h-12 8h*7h* 
*»XSi«:ff 5. Si, o , Si, i , • • S 

1, lstt^ig^it^Sbox "NewSbox" 
ICioTifiE^nfcSboxT'*^ B2 0H New 
Sbox^fLT^^ AMRini^6, f*jSPT3! 
tLfcaftRou t i KffioTfflSttS 1 6«<OS b o 
x, Si, o (x) , Si, i (x) , • • S 

i, is (x) *£jfcU MRou t i*«*&-r*. 
Shift SfLS^cfcr/M ixedcolumn M^te, 40 

1 8 K^f «ffi^8!T<&*o 

[0 0 3 7 ] 0 1 9<7)J[131C0^P — ^Xf7^ [110 
1] - [1 1 0 9] 4o^^X^^y [12 0 1] ~ [1 

2 0 9] 

[110 1] i =0cht7 hT^o 

[110 2] SLSCVX^MR i n££j£U ¥XC*f 
LTR i n £cDXOR?gCff£:fr? (XORt £) . 

[110 3] ¥3tiC^UTK iXORKiic^XOR 
?Hg£fr5. V^^^KCVX^iRKi^A^tTl 50 



10 

6i(DSbox, Si, j (x) (j=0. 1, • • 

• , 15) SifittS. 

[1104] Xt7^[H03] -e^jsKUfcs 
i . j (x) £ffl(^7cS ubby t eMl^fT^o 
[110 5] Shift ffia*5 J;tXM i x e d c o 1 

[1106] i : = i + 1 <hT£ 0 

[110 7] i < N- 1 T^^i^T7 7° [ 1 
10 3] fC£i£ 0 -tnet^tt^X^y^tCiitfo 

[1108] KN-ii^XORffll^fT^, RK 
n- i ^VX^MJaSSEtCfft^UT 1 6<1C0S box, 

Sn-i, j (x) ( j =0, 1 , * • • , 1 5) £ 

[1109] Sn-i, j (x) Ci^Subby t 
eJHS. Sh i f tmm. ^^(/KNiOXOR^I^ 

[1110] Xt7^ [1109] (DjRJjm^tC^L 
T, 7X^7lM(DaiMlRou tch^XORif?: 

[0 0 3 8] 7X^1MI10)7P- : 
[1201] i=0, Mask=Rin<ht7htS. 
fib. Rinti [1102] T4«SnfcaftVXJ11f 

[1 2 0 2] «F^fcffla«B5ct0gtt«ofcRK i^ 
6> MaskXORRKi^SSLT, ilt^Mask 

[1203] Xf7^ [1 2 0 2] T*J5ScLfc«U(r^ 
Mask£NewSbo x tCA^t"^ CI <h fC<£ o T\ 1 
6flCQSbox, Si, j (x) (j=0, 1, • • 

• , 15) £SL«Rou t i«r#T, Rou t i£frL 
^MaskW, Si. j (x) tt*#ffc4effi«B<B» 
i gCDS u b b y t e C^^Tffl^bn^o 
[1204] Mask^Shi f t M i x 

e d c o 1 umnlld^L, *:<D9B t mfr*><Dltitl& 
ffi Lt^Ma s k <h"t£o 

[ 1 2 0 5] i : = i + 1 i-fcy h~T£o i < N- 1 
T^^iJXf77° [ 1 2 0 2] \zmZ>o 

[ 1 2 0 6] Vgmt&WffifrZAJjZtirzRKN-i 
/)^MaskXORRKN-i^KIlT, ^(DWiWffi 
*£«rbl>Ma s k £-TZ> 0 

[1207] RinN-i^NewSbox tCgygT* 
^chlCJzoT, 1 6I(7)Sbox, S 
N-i. j (x) ( j =0, 1, • • • , 15) <h£lifc 
RoutN-i^llT, Rou t n- l ^SiL^M a s 
kcht^o Sn-i. j (x) ««F^t5a31gR<DmN- 
1 gOQS u b b y t e lC*5^Tffi tr> btl^o 

[1208] MaskSrShif t ffiatcStJf&L, 
(Dmm&gk&SrL^M a s k<hT£o 

[ 1 2 0 9] fflM^fc&SSR J; 0 A^7 ^ tlfc R Kn^ 
6, MaskXORRWSIL, ^-fl^tt}^ LTja 
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[0 0 3 9] 

Aic*rr*££te (-fc^'J^) 

[0040] «p^ffc<Djaff*«fii^*tt, MAtfrtP#{t 

RHixfectr/y*^ z =xXORy^It^(7)l;ai 
T. aftV^fiffiTttx ' =xXORr x , y' =y 
XOR r yWcttKix ' . y' d^z' = x' X 

oRy' sauicr^ftaic, z' tcp-r^srb^^x^ffl 

rz =r x XORr y&Sllf.'t 2> 

^btc ^MS^Sitc^T, MSbox 

[0 0 4 1] **^RAM(l«*jKS«!:1**l*ll t 

^^^'ECfLt^ b o x^RAMCMt^^bt 
*^>o 0!lx.kf8 ti >y h- 8 hCO&te&'fro S b o x 

&VX^ffiffi£§li^T£fCteS{£2 8= 2 5 h# 

(ST7^^7PXl/^hD>aS) ^fi^Xh0X7 

[0 0 4 2] a^X^fltffi<D^I^CD^:^(C, VX^/i 

MS^CO^^^ck^^^RAM^^^^M^^A 
ffliaK©[Rj±l5<fctf*Bft^SRAM(l«©B'J«tt^ 
[0 0 4 3] f6W#W:, «-*t{tlC*3^T. a»ti&ffi^ 

z.<nz<t-D xmm^(D^i± t r a um^nm 

[0 0 4 4] *^ffllO©lWli, *i!f|Bt^£fT5 
[0 0 4 5] 
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\zw-ox^(DQmnm-&m.(D^(D i -^>£rii#?"r-5^ i 
[0046] *5sw©9j«)!Rr»ic«tn«, vzmt&mt 

[0 0 4 7] *fSW©$6tcgiJ»«r»t:«tntf, nf^t 

titzm^mmtmt, tmimz^xt^m^m 
[0048] *5tw<D2 <E>izmv>&miz&nitS. ^mt 

wmm^mcntatuzfiS'^^nxh^. *r<mmm&m^ 

mt. qfi (qtt^S) «H7£fiI£, ^»aiSUC*£oT 
30 ^-cDqiiroS^ffi^^w 1 o^IKt -53SiR§§<t, ■■€■© 

[0 0 4 9] *^<73$£(CSyw#SfctCinte\ Bt^ft 

W»SlP^S<03t2OA*tt-€-(»*»»^«l^&cDffl* 
[0 0 5 0] *f!^<0$etc!SiJ««f®{C«tn«. Ht-^ffc 

•^s. H«ti«!:«ro#tefl«isfta«i<!:A*M[<n*fl&eei8i 

50 ^I^#SifiT4Xfy7 , i. £^A,T*^-2>. 
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o-tylJ-JC»-rSSft*W>S:DPA»*S:*3RT#, DP 
A*m>fcfK«MttB*M* (analyze) SrffljKKU Pff-^ 

[0 0 5 2 ] «fi»»lC*5^Ttt, a*fsa»c*TAA 

/tvx^ffiiilcffioT, ttft<B<a@^fiI£fflieu 

fftH^vx^tt©*^ (ir^h) «r/B*u -tn-en 

OB^VX^IllMlfc^SMftf'-^^ROM 

7 7h7^MTfc^«tt^.o ^JAiiSTl 
6*00<g;=]X h(7)XV- h^-Fffl^LS I f^^tfe 
6 K/H hg^^)^:^ja:ROMffi«SriBx.Tl^cOT, 

[0 0 5 3*] 

[0 0 5 4] B21 tt**WtCctS!Bl<Z)^-f 

2 3«> mmt&mi o oo»xoRStg:*«t^*«i^ 

$ tix v ^ t> <d & m ^ n n j: i ^ 
[0055] H2i ic^o^r. e^tsa 100H SL 
tR (r = o, i, • • q-i) *5s*-rsa»fg 

£S10 3£* ^ca&ftKftoTS^X^fliFM 

o, Rtommmmmft&mw-rz) (xoRts) (x 

i n ' -?JXORFMo, r) JfcffiWHSW 1 0 6 

^ftit^xout' **j«"r*Bff^{b«ia»i 

Old:, ^<A&ftiC^TS«VX^<iFMN + 1, r 
©*©1^*1RLT««T 0 5 ^coffi 
*Xou t ' (hlRSnfci£-7X^IFMN + i, R 
ta)#flSW»31fqS:ai»LT (XORLT) Bg-^X (X 
ou t' XORFMn+i, r) ^^fitt^SiWIil 

i o iT'fi5ffl$n^H^vx^<@©-tr-v boim&m-?* 
[0056] mmtmmi o orau aetc. fp*^^u 

fflGQ R AM 1 6 2ch. B£#N)R»Xtt 
f-^Sboxi, »»«»BftL**ft«lt5RO 
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M164<h, ROM?(7)7 0 D^7A • > ^ 'J 1 6 0 (C*& 

0 3-107 SrMH-r-S^D-lr^it 1 5 0 <h£^A,T^ 
S. fttMchbt, yDt7itl5 0H IgM^g^ 
10 3-10 7lC»*f fcBfllt^l^fcy^'J 1 6 0 

3-10 7^SltfeJ:K I2 1H7P 

[ 0 0 5 7 ] Bf-^fkfflaW 1 0 1 K El 2 2 CDgt 

10 XOR, B 2 OH*»*«tr)tB 2 3 ^jR^ttOfi 
tc cfc o $ n^> 7 ^ > K NftftfflKg L^fT 

[0 0 5 8 ] a 2 2(D»XORH 3^3$ 1 0 9CJ;^ 

SKich^XORlT^l^U ^(DfgchA^X 

1 ' <h£XOR LTtB^Z i ' ^{M^^o 0 2 3 <D# 

&j&&mz. wmmi 1 1-1 1 9tCct^T£LftRicfi£ 

oTSbox CD^9?t w i j , r ' ( j = 0 , • • • , u 

20 -i) £at&u f ©ajjsnfcssw i j, R T ^ffl 

[0 0 5 9] a*VX£ffiffilc:fc^T^Lfc5£ (7) 05 
P^£ffl^£cb, 02 2<DMX OR lC*tr*TBl 1 OR 
ichROi f£*tJ£LT#:<Z>5S (8) 3&«ftt,nS. 
[ft 8] 

RQi = Ri @ FM U (8) 

[0 0 6 0] 02 3<0##*£«K*^Tm>SftSH 
13 (B) (ONewSboxCOr ichro i CMLT 

*<£>j£ (9) tfssns. 

30 [ft 9 ] 

wi* tH (aci r ) — wi(ri ® xi*) © roi (9) 

[0 0 6 1 ] 02 4»^[a^,S20^^7°^ 

2 6K(7)|XOR^J:tf»MS(^M^^fn 

feB2 iI^$nTt^t>^)S:ffl^ntfct^. 
[0 0 6 2 ] 024 lC:fe^T, fflf-^fbSe 2 0 0H 
*R£35£T*a»S8£B2 0 3<fc* ZrOHLRlztt-oT 

40 ^)M2 0 4i, \f3<D¥-X£WmW>2 0 4l:J;oTl 
W^tlfcKvX^lFMo, Rch^XORT^> (X i 
n' =¥JXORFMo, r) XOR (£M&ftlh3fn) 
2 0 6 ch, A^/X i n ' ^SKD^AAX i n * 
^ftlt^Xout' &!ktfLTZ>m%t<DVgnfcmm^ 
2 0 8-2 0 9t, A^Xin' 0 SLft R 

TSl^r^JJC«-&$nfcl«^bffl J SB8 2 0 8-2 0 9 
<D*<D 1 O^S*?LT^<DgK$n^^fbjaSSBtCA 
*Xin' £{JWS-r<5«J«SB2 1 1 P^SLftRlcfiE 
oTffiP^bffiaS8 2 0 8-2 0 9CD^O[w1L; l o^IK 
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JIFMn+1, R^^l^^MLTSI&t^M 

JIFMn+i. Rd:^XORLT^5: (=Xou 
t' XORFMn+i. r) ^Mt^>XOR2 0 7 

H2 4lCl*5^T, 2 0(7)3J«g&2 1 1*5 

[0 0 6 3 ] Bg^-{b^M2 0 0 te> $btC, f^H^^EU 10 
JB0ORAM 2 6 2 <h, S^^X^ffi, Hffi**^**^ 
"7>Sboxch, »»&»llS»L^£te*rtT£ROM 
2 6 4<h> ROM^7 p P^7A^ : E l J 2 6 0l:ft9i 

*nTo^^oif^A«c:aoTcti6<z)tt«iaB*2 o 

3-2 11 &fflffl-rz>7n-\iy'*)'2 5 0 ££<&A,T^ 
2 0 3-21 1 icMt^M^^Lt^t'J 260 
3-2 11 ^ILTfeJ;^ ZL<Dm&* 024«7P 

[0064] mmtmmvn 208-209H i^yx 

^ffiFMi , j *3cktf S b oxWt7 hwi i. j 

0 8 — 2 0 9Ul*3^T, 0 2 5 ©fXORitf, 0 2 CO 

[0 0 6 5] 0 2 5 0IXORH *-^lbffi31«2 0 8 
-2 0 9<7)&^(Ci^i£YX^fFMi, Rch^K 30 
i^XORLT^lSftteL, ^tiA^Xi' 

^xoRiT^zi' ^«^~r^o m2 6<D4mm$z. 

mt* ^ftfflI85l:@f OS b o x©t 7 hw i 

j. r' (j=0, - • u-1) £jfl^T#lft»aj 

$iT£o c^t, a»vx^iBSJc^tt^^ (7) cdm 

£fc£:ffl^£ch. 02 5(7)tXORlC^^TEll 1 <DR i 
iROi CMLTRO i = RiXORFMi, Rtfi 
t#btl. i2 6©«Mil:^^Til2 (B) <Dr 

1 o i (C^lELTw i j, r' (x i ' ) =w i 
(riXORxi') XORroi btl^o 40 

[0066] ^mfiiz^&^moimfe-^^zmmz. & 

[0 0 6 7] (A) DPA^SctLTCOWSftttCDpgiS 
SLI&^X ^7 MffiteD p a \Z$i ZL tfim 6 

[0 0 6 8] (B) ROM^^^^IC^^pT^ttCOr-l 50 
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H 

@l£vX^<i?£te, «ilir"7J^ROMl;ffl| 
t^^tT, &»^X*iBffi,fcO&B&RAM»«£/]x 

I^n^VX^Kl^ClS^TftfflROMi^^ 

[0 0 6 9] (a) (oraiHtcHauT, ^wzmm-r 

«*©*a A*2Tt>^»lc:*^T*SCl t*«^oTV^ 

Lfci^o*4tt*»TR«ts. ^tifc (B) (DUUJS 
CiiiLT, ffia&SHffivx? I©8 q S 2 gKl: l 
t, mc^o> K4>^> KSCS b o x £*illc-r£ 

2 ms«icw*t, «ffiROMi^$ 

[0070] 027 tt, 021 (£>?g 1 CD^< ^(D^mt 
Sai0 0^«^LT*t), ^-T>^-;i/ (Rijnda 
el) «F-^{fcteJc:H^^X^*lffi*afl9bfci«-*{tSI«3 
0 0 ^LTt^o {ML, 02 7 {C&^T, 02 1 
^5^7^15 0, ^^UUO, 16 2*5cfc^l 
6 4teffimt<Dfr#)\Zgm£nT^Z>* i2 7C^ 
T, MftS13 0 0H SLI&h (h = 0, 1, • • 

q-1) «:**r*a»**»3 0 3 f(7)aS 

h C^oTi^VX^lFM i n h©*(7) 1 "3^rjg^L 
Ttt*£-r&ItiR§§3 0 5 ch. A77<7)¥3CchiiiR£nfc© 
/gVX^MFM i n hi^XORf^XOR 3 0 2 <h. 
A77X i n' ^SKoTathCfoTA^X in'S 

^fbiT^xou f &±tit-rzmwc&L<Dmmtm 

1S3 10 (Mi«0^i^N-2) t, SN-2g 

<ov6mtmm&3 i oomtixou f ^xin' 
^cxout' **jat-rs«N- ia©*^{b«taa3 i 

1 

[0 0 7 1 ] S&K<DB&-^fb$&JSg: 3 1 0 COg-g: i tt, 

ISt^I»3 2 9 <h, iKiiKVX^MFM 
i. h^XORLTHl^Wt^XOR3 3L ^CD 

m7jC0iichA77X i ' i^XOR^XOR 3 3 3 <h, 

t®a* h Cfto T S b o x Tft 5 9£I S i , j, h 
(j=0, 1, • • 15) (Dtp<D 1 -j^IWLTT 

X*£ftifc»Ko. h«:«J&rs«J»l3S*fcttaKS3 
3 9<h, ^©iR^nfcSi, j, hi:fifoTXOR3 
3 3^^>Ottl^7^1tyyNW hT^S ubbyte334 

<t. Subby te 3 3 4 <D fcB *J £ '> ? S h i f 

t 3 3 5 Shi f t 3 3 5 ODttjTJ^: ^ ^ X hZi^A 

T£M ixedColumn336 £ /uTt^o 
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[0072] *n - i mnvsmt&m®. 3ini si 
m<Dv%mmw&3 i o tmm<DV)»&3 2 9&£tf 3 

39£, XOR 3 3 1 &£Z$3 3 3 t. Subbyte 
3 3 4 £ . Shi f t 3 3 5 i^tl, MixedCo 
1 umnUW, Wmm3 7 9 iz J; o TS»? £*lfc® 
S^X^IFMn. h £Kn££XOR 3 7 1 (CefcoT 
XORLT7X^$n^iK N , h^ML> Kn, h 
diS h i f t 3 3 5<Dttit)t$:XOR 3 7 3iC«J;o TX 
ORU fflgg3 9 9fC^oTS*?^nfc@^TXi7ffl 
FMouth£XOR373 £ £ X O R 3 8 3 IZ "> 

[0073] FMi. h, FMinh, 

FMouthH l$7X^tt'fe^ S 
i, j, hit !S0SboxT«S. ^tibCOS^v 

x^fit&^r/s b o xfitii^*56^n£ 0 Sfot, b 
^7,^mmx^mn(on,^^^mmz^^m^m 

fefciSv^^i^ct^S b o x<0J«f-^$, #J 
Atf02 1WRAM1 6 2 ££#02 4C0RAM262 
<DJ:o&RAMIZ°V\$&<T* 02 1 <£>ROM 1 6 4 4o 20 
£££0 2 40ROM2 6 4©J;5&ROMi:»ttt§^ 
ch(C£oT, ^(I^^^RAM^^^ftgiCgp^T^ 
§ 0 Z<D£ofei&mfeRAMmCDm&)\Z* t5/u<D128 

[0 0 7 4] m 2 7 0Qtf£-^{t£IM 3 0 0 tC A^¥X^ft 

ShUfcT, 0 2 7tC^-r^T©«J«S3 0 5. 3 2 
9, 3 3 9, 3 7 9 *5<ktf3 9 9lC:fet>T* qflOA^ 30 
fi(7?4 , ^6h#@C9t)(7)^tR$tlTfifc^$n^o 02 
8fii2 7 IZ&tfZ Subbyte334 (Dm&Zm^ 
LTl^o Shi f t 3 3 5 te0 1 6 l;^$ntl^ 
M i x e d c o 1 umn 3 3 6 te0 1 7 (CWI 
i$nt^5t)fl)^l^. 02 8OSubby tel: 
^^Tfflt^n^S box S i, j, hfsL 0 1 6(1 
^tlT^&il^cD^-f >t"— )1&(DS u b b y t e <D 
SboxT*SS^HT*0)i (1 0) T^^n^o 
[*1 0] 

[0 0 7 5] 5£ (10) lC£>tt£a i, j, hfc£tfb 
i, j, hH S (9) (Or i i, j35<kZ£r o i 

i. j£^n^*n*hsu wftiitiro^^/F© 

Subbyte OAA^cfc^ffi^JCD^X^MtC^iSf 
£<, as, j, htt* XjJ-?X?mtiL(DT\ f(DSub 
by t e£OS9co^X^M^cfc^fflS#(CctoT-^W 
fC*£3<, — bi. j, h«ffi«ica^pjHg-t?ft 

[0 0 7 6 ] 02 70)l£-^ft£«3 0 Offl^CO^n-^ 
777^ [1301] - [1314] (C^-fo 777^ 50 
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[ 1 3 0 3] ~ [1 3 0 9] t£B2 S (Dm i Rt;:*^}* 
7s5-v7° [13 10] - [1314] te0 

2 7 ©»N - 1 WL\Z&»Z>®M-Q3bZ>. 
[13 0 1] i = 0 t-ty hf^o 

[ 1 3 0 2] A^¥3C£^(t^0, ^"CaftRffeS 

3 0 3(C£oTSL»h (0^h^q-l) #58££n 

[ 1 3 0 3] AAVXlCttLT. S^^A^fiCD*^ 
[FMi no, • • • . FMinq-|) tf^ri* bFM 
i n h ^W3 0 SiCct^Til^U^, XOR 30 
2ia^TAWXtFMinh^XORt^) 0 XOR 
3 0 2<7)ffi;/}£^5 :f -^X<h-t£o 
[1 3 0 4] i^VX^IOi^ |FMi, o, 
FMi, q -)} ©W^FMi, h£3J»8g3 2 

FMi, hll^lTXXORKiXORFMi, h £SI 

[1 3 0 5] Subby t e 3 3 4IIi3^T, 
-^XtC#LT. ^M§§3 3 9fC£oTa$ChfC^-?T 

aK^nfc^augxsi^-^s i. j, h (x) izm 

^Xtt§ 0 
[130 6] Shi f t 3 3 5 K^T^fH^—^ X 

-^x^-r^* 

[1307] Mixedcolumn336 C^UT 

^r^rLV^f^^^XchT^o 
[1 3 0 8] i : = i + 1 L^v ht^o 
[1 3 0 9] i < N— 1 (Om&te [ 1 3 0 3] \ZM 

[13 10] Si^htCtSoTS^VA^M^*^ {F 
Mn-i, o, • • FMN-1, q-l} <D*$ti>£> 
FMn-i, h^M3 2 9l;J;oTlKlT, fi£A 
iKN-h triT-^XMDtFMN-i, hWil 
T\ XXORKN-iXORFMN-i.h^KSt 
J E-^?^^^»rL^4'P^x-^Xch-r^ 0 

[13 11] ««|g3 3 9l;j;oTlSl$^c#Sf 
«»f-^SN-i.i, h (x) (cSE-^Tit^AW 

[1312] Shift335 (Cfc^T^x-^ X 

-^X^^o 

[13 13] a»hlCffi^TB5EVA*fi(&|i£ {F 
Mn. 0, • • FMn. q-l} ©*^6W*I»3 
7 9(C£oTFMn, h£SftLT\ tCD^mf-^ 
X, ffi^lKN^^^FMN. hfC#LT* XXORKn 
XORFMN.h*»*tS. *<B«JH6***L<r> + 

ra^-*x£T5o 



(11) 
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[13 14] ft»hiCftoT@^X^<i<0ii£ {F 
M o u to, • • • , F M o u t q - 1 } (Dfyfr b F M 
o u t h£«m§§3 9 9tCi^TS«LT. 
Xd:FMouth?:XORL ^O^^^ffi^f®-^ 

txouf t LTSwe-r*. 

CO 0 7 7 ] 02 9H >T-^i:a^X^7t 

L> @2 9C^^T, 02 1 iC^ttS^a-fcylf- 1 5 
0,^^U 1 6 0, 1 6 2*3cfctf 1 6 4H«#ft©fc** 

FM U - f C^FMin^ 

[0 0 7 8] Ch Dhfi. 1 6/H hco 

-o, i, • is) ^n^nm^x, #co5£ 

c 
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*(C«BS$tlT^^o 02 909*gfi£te, ^ r> > KBB 

f&tl&ttS&Su b by t e 3 3 4 Idtt'&S tltzty^W* 
3 3 9£8«&£n*S boxM^CIi;^^^ 
It* B2 7<hHi;T*0, Hi:*jS»*lCOt^Tttfftf 
W9iteL&tr>. i3 0H@2 9fc£>tf£S ubbyte 

flrfi£>h = 0 , 1, • • q -\\Z-O^X^(D^ (1 
1) SttfT. 
»11] 

(i=0) 

(i = l, „. ,N-1) 

(i = N) (11) 

* (1 2) ©JzSKffiiBSft*. 
HSl 2] 



{ 



c h - 

D h = 



-h.l 5 



C h ,iC h0 



30 



[0 0 7 9] 029 <DV§mt^M4 0 0 fC*5^T\ 
/t-f hjaa Subbyte 3 3 4H SJ«gg 3 3 9 (C J; 
oT!K^n&161(Z)Sbox, So, h> S 
l. h. • • Si 5, h£ffl^T, i3 0(I^# 

mM^&t&m&'ffVo lemons,, hiiDPA^ 

(12) K&tt&Ch. dh, j&m^X, S 
j, h (x) =S (xXORch.j) XORdh, j 

[0 0 8 0] 0 2 9(DV&mt^m4 0 0CJ6I7D-I: 

W7f7^[1 3 0 5] *5<fcl/ [13 11] (CiSH 
T, «Jlfegg3 3 9^J:oTa*hlcSeoT16fflcr)S b 
ox. So. h> Si,h> • • •> S l 5. h(7)^^t>a 

[0 0 8 1 ] 127 COfJg-^fcgg 3 0 0 Tf Subby 
t e 3 3 4<D^— ;/;[/7^&^#> FT^&ScDfCML 

So £T\ ii^cO^-T>T ? -;i/® ; §iiC^^SSubby*40 

C h ik ~ Ch.u = ••• ~ c h 0 

.dft ^ = d h | 4 = ... = d h>0 

[0 0 8 3] gP^. 0 2 9CO^{bgg4 0 Otffl^b 
tl5 S b o x IC^S^Sffl R OMilJ, m2 7<DV%mt 
gf3 0 0CO^-&(7)l/l 6 £T££<h^T££o £l± 
^e>, a (13) Wctl2 9©HS^fk8!4 0 0£ 
ffl^3;i£lC<£oT\ S b o xMSSROMfi«^B 
2 7 0«^B3 0 0£ffl^fc«-&Ol/ (1 6N) 



{: 



(12) 

2o* te (016) -\cDA^M£X£is-t\> rnfc^fu m 

30©Subby t e MmVAtlMtZX X O R C h £3E 

-r^ch^T^^o cin«, vx^Mcoratca: (i i) <d 
^isft^T, a do) lemmas i. j, h (x) = 

S (xXORai, j, h) XORbi, j, hfC*fL 
T, a i. j, h*S*^ncH«&^S»»cK£r€r 
So bi, j, htl <£St&5£»cft<Z>T* i {CP 

^^V^StC^T^So £oT, 03 0(C^-r^3{C 
Sj, h (x) =S (xXORch, j) XORd 

h, j xmznz&m i i:»ms b o xzm^rc-v- 
-frt^ hmm&pimtta&o fox. 0290^8 

14 0 OTi^b^S b oxMIMfflROMl 
fcL 0 2 7 OBgHtftl&B 3 0 0 <D^<D 1 /Nit^ d 

[0 0 8 2] 0 2 9£>«MHtl£«4 0 0 \Z&\,* 

x. v^^MCh*5<tOT)h(cgi-rs^#S: (12) iC, 
(13) ic^i"^ft^J[JDx.srchfCctoT, ffiffl 
b o xC0» («JS«I») ^«S&516t7h^ 

[ftl 3] 



50 



(13) 

[0 0 8 4] 0 2 9<7)^fcgl4OOT1iA* 

®143i:I/ai^ffliItCfet^TFM i nh^FMou t h 

VX^SMlKiXORFMi, hO>ffi£:ffl^£C:<*: 
la^T, iKi<h@STX^!FMi,ht^XOR 
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[0 0 8 5] 031H 02 4<D9i2<D&'f'?<Dmmt 
^■2 5 0, ^^E'J 260, 2 6 2 45«*:«2 6 4 ttfB^ft 

<Z)^{Ciim2nT^£o H3 l lc;fc^T\ ffff-EMfc3£E£ 
5 0 0te, a»hS:Mtsaa^4g5 0 3<!:, SLS 
h(C«KoT«»ix.*ff 5««»5 0 2 ^J:0*5 0 4 <h. 
MS5 0 2 43cfctf 5 0 4fc£oT&ifch fC^oTS^ 
an*S^tc365iJt*S*SnfcJB0-JBq - 1 <Dq{@<7) 
Pt^5[LSgi$5 ll-513i, ^T't^ fl 

[0 0 8 6 ] f&m&Wgk 511 — 513 «L A^? 

Xin' ^tSoTtBAXout' ££)£T£?f§&g: 
COPt-^{bMSg 5 3 0 flu 
a C7) ffl ^ £ A * <h L T S Be 0 <7) A # & n i t L T tb 
Xout' ^«t^)^N - 1 e^Hff-^fb«l3ia<h 5 3 

i, £$atci>*. *oa-»N-2g©i(f^ft8ia 
5 3 0(t si^va^m, xor 5 2 3, ^n-en^s 

ubbyte525. Shi f t 5 2 6 *3cfctf M i x e 
dcolumn527 fnf^^iSYX^l 
43,fctfH5£S b o xKtfcoTI*#fl;S:fT 5o 3IO©a>»g 
^tfbMSI&S 3 0<^«fl:ttXOR 5 2 1 m£&£tiT^ 
£. ^N-lgO«f^ftffllg5 3 1H @^VX^7 
fit, XOR 5 2 3, 5 2 8Mtf5 2 9, Subbyt 
e 5 2 5 S hi f t 5 2 6 £WU ^tl^ftGOH 

^TX^l^i^S^S b o yLlzVt-DTVUmk&ft 3o 
0 3 1T11 iKichFMj, hMOR^nfcKi 

us**, 02 9<Dm^tmm\zmK s ^FMj, h t*« 

XORC^oTXOR^tlTXOR 5 2 3 — 5 5 3 CO A 

0 2 9a)»-&<hl^eitCFM i nhtFMou t h££« 

[0 0 8 7 ] 031 (BffiHHLgBS 0 0 K:43HT*>, 0 
2 9 <DS§mt^W4 0 0<D*-&<h^^tC^T(O^^> K 
T'HUS b oxffl LT&*3> J (13) (D^kft&m* 

Coj® c y = <10101010) a (OIOIOIOI), 

S bo yiCO-izy hG>ftaU, ±T<D j =0, * [ft 1 5 ] 



30 
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mm<DROM<Dmm*»imttez> 0 mmt&m 5 0 0 <d 

ItffSte. l**f{fc;SB4 0 O^S^ctO^gg^^^ 

B-HtB-jwtt&s. mu 0 3 1 mtmm 5 0 0 
02 9(D^mtmm4 0 0 0 *isy 

0 0 <B#rt*l§l&<&1M X#*#<&*. ft*3, 

1 5 0 0(Cti2OWaKS5 0 2*5^5 0 4 T^fff 
fc*<OW»8g5 0 2£>J:tf5 0 4<Dv%—Jjf~if 

t-eiMTfcct^. -e-cDcfc^ftj®^ 

[0 0 8 8] 0 2 9*5cfctfEI3 1 0Offf-^iffl3agg{c43^ 

[0 0 8 9] rfcfc, BSv^Mffioft^ttic-o^TK 

hjt^o 02 7 (ommtmrn-w** ajr^x^ftqa* 
3te»*#t^»-&tt, aftvx^4iffit*M«Hcrai;iftfp 

oxfflf^i2 9$>&tf3 1 tf)llgM|{fcgB4 0 0^3 
[0 0 9 0] *iC, q ^/h $ ^ iffi (Z) 

T^5o *{C/hSliq = 2©»-&OS4tt*ff«-r*. 

02 9*5<trjC3 1 (DmmtmW4 0 0 43<fctf 5 0 0 lZ& 
^T, q = 2 <hU ( 1 3) Cf-^TS u b b y t e 

(c^^Ti-tr^h mm) »t0Sbox^K 

FM i nh&JttfFMo u t hSt*Lfeit)*«fti 
^C^^tt), co, j, ci, j, • • • . c 

q-2, j fcniLT^WiS; ( i 4) $ feast (is) co 

ftfr*»5tU do, j, di, j, • • - . d 
q-2, j JcllLT^it (16) <Z>*fMcK5rr*£ 

itCekoT, DPAk:»-r**^ttft»a&*i:t3WT* 

[0091] q = 2, SboxOTyh OS) C0»# 



1 



^TCD j = 0, 
1 4] 



1 5 lZ~D\,*T 



<14> 



q^2, 
1 , • - 



1 5 (3-3 t^T 



(Coj © Cy) v ( Cjj® Cy) v .... v (c^ 0 c fl .J = (111U111) 2 

* [£U 6] 



(15) 



q^2, SboxPl, ±T<Dj=0, 1, • • * 
1 5 C^^T * 

M d J V Wlj© «W V V (dq-^^.y) = (11111111) 2 (16) 

[0092] dpah m9<Dmj£tt&*Aiz&tf2>m so (c*3tt-5m^^-f ^ >^TfTfens*^<h^fe^ 0 02 



(13) 
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9*5cfctf 3 1 (D^mt^m4 0 0*5^5 0 Ofr£±T» 

[0 0 9 3] S»#t4, B<B««6Dfc#fcJKT<B ( i ) 

( i i ) tf>&S£fT5« 
(i) DPASfflW, fi7>f«Kfi)i (pJfigft 

tt) (BR£K5rr*. 

(i i) (i) TH^^nfc»<7)<S(0»«COV^T, 

[0 0 9 4] ±3£©»<0«<O^:cs/#tt, V$^7a1zy 

[0 0 9 5] DPA^ffl^T 128^7 h<£>^£«t^-r* 

WD,= (d a jSd, ,) V (d^ecU 
) «^T> 
WD^ (11111111) 2 fc6tf, 

[0 0 9 7 ] <£oT, j = 0, 1, • - , 1 5<D±T 
\Z"D\,*T f j = 009«^{C, Bt^fL^gteDP AlC*H. 30 
Tefe^^T^^o -£-<£>*:J6JCte, £TO>j=0, 1, 
• • • , 15 CO^T, WD j = (11111111) 

^^cotCi^^st^an*^:^ 2128 tfts. 

[0 0 9 8] *tC, i|XORC0f±J7j (0 9(Dl^M 
B) ^Sbox^AA (0 9 0i^tMX) (C 

^w*DPA(cj#-r**^tt*Biwr*. a 9 

ffStrJKOa^CODPA^A. ^C7)^T'S: (6) T 



24 

1 2 8 tf-j/ h^C0^TCDpT^^/\ o ^->^^ 

fiT^^o 0J;Ui, DPACioTl 2 8t'7hl«i 

H (LSB) ^OT^^ItWo^ 
tt, 1 2 7 ±ftt7 h (MS B s ) <D± 

[0 0 9 6] SboxOtll^DPAl:St5$ 
£ttK:tWC* i9(7)ij^t^AC^tt^)DPA^0 
2 9£>£tf 3 1 <Z)B&^b^fi4 0 0 43cktf5 0 0 C^l 
TjafflLfc«-&«COlr>TRW-rs. 02 9*3cfcrX3 1<D 
S0g©Subby t eC^^T, fnfft©Sbox 
OtH^M^n— K^n^^-Y ^ >^tC^^^TD P A £51 

fflf^ch, »Kltt28 (16-F) =2128-8F 

CT, F= f o+ f ]+ • • • + f l sT&£ 0 f j tt, 

^coct oizizmzn&o j ( j = o, i , • • • , i 

5) #g(7)Sbox0^TX^I^do, j, d 
l, j , • • • , d q-i. j ti,Tzh€\Z. 

mi 7] 

j) v - - • v (d q _ 2 , .ed,.,, , 



f j = 0. 



[0 0 9 9] tlM^^JKDm^iz-O^X, H9 0jH3£J# 

a£ (1 3) KcfcoTlt^Vf hffl?Trffl^S*l-5S 
boxCQifc^lo (1-feyh) »t<!:Lfc02 9^cttX 
3 1 (0Pt^{bSM4 0 O&Jctf 5 0 0JZ**UTjBfflLfc 
»^tCOV>TK9rr*. ^Og0Su b b y t exilic 

^ >^IC:fe^TDP A&mm-tmi. »Kill2 
12 8- (15/1 6) HfcJtWLfcttMTtfttT* 

(j = 0, 1, • • • , 15) #§C7)S b o k<DAJj 
V7^i$:co, j, C 1. j, • • Cq-l, j ch 

»18] 



(14) 
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V (c q . s 



j. 2 



wc 



®c q _ 1 



wc 



25 26 

WC^ (c 0l ,ec u ) V (c u ®c 2(J ) V 

WCj = (wc J( 7 wc J( 6 wc u 5 wc j( 4 wc J( 3 wc 
) 2 C£V>T, 

, • • 7tCl3LTwc J( e =0«£T5e£>1H&) 

•-,15 ICOl^T 



hj= <e = 0, 1 



10 



[0 10 0] gp-^, j = 0, 1 , 
h j =0©«^DP AtC*fLT 
fc*!>tcte, ;£TCDj=0, l, • • l 5t:o^tw 
Cj = (iiiiiiii) 2"r?&tt*atf& | 5*ct^- £ 

[Oioi] R»ti7 h • ^TJMnm&iz-D^ 

T> q = 2*055; (13) iC^OItyAW hJlITffl^ 
5Sbox©t^h (SS) 1 ICI8:£U S 

(6) T*£n*B*»fcfry h • ^T^UfeiBffl bfc»^^ 

WCj = c 0( j©c la j = (w c j 7 w c j 



5 0 i2 9*5cfctf 3 1 W«^ft8B4 0 0&&Zf5 0 0 
tC:fctt£>SIOg:tf)S u b b y t e$&m\Z&\,*T. ^rtl^ 
n«Sbox0AM^a-HSn5^a>y (0 9 
<D»£#*j£Ctc43tt*»r3£*'f 5 >if) IcDP A£31 

12 8- (15/16) Ht-Jtfi»JLfcstff*T»SET^ 

S„ C^T\ H = ho+i + • • • + h i 5 T*$>Z>o 
hjlt #<£<£^c^£n3o j#BC0SboxCDA 

^X^/I^co, j^cfctf CI. j fcL&tStC* 

»19] 

•wc, «), C*WT, 



hj= (e=0, 1 7l:ULTwc J( 

(e=0, l,...,7l:BLXwc Jt 

^^T\ wcj, e = 0 1 -rr$>So jUSbox 

<DffR &m^o eitt;yhtt«*t. 

[0102] S b o x CDf&te 1 (14) 
#Sc o. jXORci, j = (01010101) 2 £ 
fctt (10 10 10 10) 2T$»§1&(1 Hte*/HI 
6 4<h&0> DPA£JB^T*S:#»S<0*C&i^»W 

[0103] EUitf) J: 5 fc, c o, j • c i , j , • • 
•> cq-i, j tcSLT^S; (14) SfcttSC (1 
5) SrJSfcL, dodo. j. di. j> • ■ • , d 

q-i, jco^ts (i6) (D&ft&mrcTz.tiz^ 



6 w ^ j, 0' 2 

e =O*Hfc-Te0fflk) + 
e=wc J§ e+l =l*»fc-re©fl») 

Ill, DP AtC^fStfffStCO^iTO^^ttOHfiti 
2 6 4t$)^) 0 ft*, IH|EI2 6 8ttftOtT0t'yh 

30 . /^->$:mn?z>m&<Dmwm2 1 2 8£jt«-r* 

t /h S -t © J: 3 &tt M£glS<0M IB * tifcP#p B 1 1*1 T 
DPA*ffl^fc»^fe»*ttOj!|«»tt*IB±^pII6T* 

So 

[0 10 4] 

C*i] 



WD j ^d < ^Jv(d u ad^v...v(^^ 1J )COffi 


(q*2, fijg^:^) 


WD^mmn)* <B5rrx ^ lite) 






5=0 (if WDp (11111111)^) 
^= 1 (otherwise) 



[0 10 5] 



50 



[12] 



(15) 
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27 28 
t2. @^^^Mj£C«t-5. Subby t eC*(«S box*no«M§-&. 
S b o UMa- KCJttSDP A*>*> 1 2 8 tfy HfeSBSSSjjcftScrHr&g 



WCfKCoj^v^-ec^v... 


(q*2, ffit^^V) 


its 

<q=2, mWkMv h 


CO 0*3*15 KiSbT 

(lllllllll^ 


O 128 


n 23 


£T<D0sgsl5K:&8bT 


2 68 






H=* 0 +h I +...+ h lfl 
<e=0,l,...,7) 


H=h 0 +h 1 +.„+ h 15 
h=(wc fc# =0 
(wq e =wcv,^l <£>») 
<e=0,l 7) 


(00000000) 3 


2 8 


2* 



[0106] vt-DX. mfe^*?m£<D$:^m^#:<Dm 

1. 2J[^_k<Z)q fC^>L^T, @^VX^ffif£te* Sbox 
tB^ffiCDD — KC^DPACTUT, S (16) (D 

[0 10 7] 2. 2J^±C0qtC"3^T, S (13) 
ft^S^c«^> BSv^^IftH, SboxAMD 
- KlC*rr*DPAK:*f UT, KSti7 h ■ tf^Tft 
^M£S<7)^;UlCO<,>T3£ (15) <^#fe«=€:Stfc-&tf, 

[0 10 8] 3. q = 2 C^ia, i (13) <Ds£ft£r 
Sfcf ISvx^iSH SboxAAlD-F 
l:Jftt§DPAl:»L/T, Bfte^y h^TWct^T* 
ftiC (14) CDco, jXORci, j = (01010 

ioi) 2*fc« doioioio) 2*«fc-e-tf, 40 

[0 10 9] 4. q ^ 3 tCO^T, £^&ROM^Ste 
@^vX^ffif£f;£, q = 2 tmVMtirJjfe 

[0 110] 5. ±3!<Z>3<E>if'&tC*3^T, (1 
4) «Sbox(Dt7h^lOCffiSl>Tl^ (q 50 



»*ffiJStt*nflt-r*<i:ROM**ttnflSci:«:l)^ 
IH|E*tt2 8 (n-i> xni fiMStft*. 

[0 111] ±m<D^ 
-f ^ffi^^^^S PNiO^Bt:, DES<D 

i^nx^fXr^ (Feistel) ^(DRf^tCfcilfflT^ 
^ i3 2 (A) teffi^CTDDE S J:S«P^ffc<0»J««: 
/TbTV^o 03 2 (B) teH3 2 (A) IC^^^FKI 
»0)<t0»IB«:*J«*^UT^*. i32 (B) lc£>t^ 

So 

[0112] 03 3 (A) @2 1 OH1 <D^-r^<D 
SS4 0 O{C«O5(Lfc^-r@^VX^fift«:0 3 2 CD 

de s»c«fc-5«p^b«c:3gjiLfci»-^{i:ft«7 oo^i 

Tt^, 03 3 (B) «0 3 3 (A) lC43fr*5 F 
<fcDW«ltt1*j£*^bTV**. fib, S3 3 (A) (;:£> 
1>T\ ^2 1 5 0, ^t'J16 

0, 1 6 2 43^1 6 4teffimt<Dt£&\zmmztiT^ 
[0113] v§mtmw7 o on, a^h^^^-rssL 

1&3&£§§7 0 1 <h, ^^Sthtoti^X^lFM 
i nh<D*<Dl^&m$lLTm&?Z>M1Rm7 0 2<h, 
A^¥^ct3S^$nfc@^vx^MFM inhch^XO 
RTSXOR7 1 2t. A^^otaShM^fi 
*i£K i JC«EoTA*«:ie^ftbTm*S:*filc-r*1S» 



(16) 
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(WAtfl 6&) OFH»l«^fb«LJia7 10-7 2 0 

2 0(7)ai*<tSlR$nfcg^V^i7fiFMo u 
t hi^XORLT^J^Mt^XOR 7 1 4 
^tWl^o FBft«fft»IR7 1 0-7 2 0O* 
!taS<aXORffi^£§tt]8oT0 3 3 (B) IC* 

(7 2 2-7 2 3) Ci^TXORltai^^Mt 

[0114] i33 (B) (DFIISH SLfthlCftoT 
B^ntBSTX^ttFMi, h*ft«t§l«8 7 
59<h, ^iKitlfVX^lFMi, h^XOR 
LTtt3AS:KIStl>XOR 7 6 2, tCDfttKDmt&M 
ft*EfCJ:^Tll»ft«Sn&A*X i ' ch^XORt 
^»XOR7 6 3 t, ^OOMhCfoTtf^Hhil 
SubbyteSi, h*^ 1 o^MLTXOR 7 6 
3©UJ;*j£ttJ&?-*S«»7 5 2 43ct^7 5 6ch, 
If^SboxSi, hCSf^T^y/Hhllt 
^SubbyteSi, h h tcfi£-? Tit*/ 

■r*a««7 5 4*3«trjC7 5 7 «{»7 5 4*«fc« 
7 5 7(D^^IMHbTai*Z i ' &QM&-?Z>%kW 

[0 1 1 5] EI 2 1 l£*tt*:/n-fe'yU-l 5 Ote, ^ 
U 1 6 0 lC»itt$nT'/^^ , oy7AJC«eoTH3 3 CD 
«F^fl:S«7 0 0 G>«4flS®3j§ 7 0 1-7 6 3^£3§ffi 

1517 0 1-7 6 3 Lfc^^EU 1 

7 0 1- 7 6 3f^MLT ! bcJ:K d<D«£\ 0 3 3 
[0116)034 (A) ft 024 (DM 2 (D&^i ~?<D 

o o^j^^it^^ ^31^-^ 

SI 5 0 OICffi<HUfe^-C@^TX^<BffiS:0 3 2 CD 

DEsiz&2>mmfcizmm\sitntmt&W8 0 o^l 

T^S. 03 4 (B) 1*0 3 4 (A) «C*frt*FMSc<Z) 
&QWmtemtiL&7KLT^2> 0 ffiU 03 4 (A) tc£> 
t^T\ 0 2 4Jc43tt^*yD-fe^it2 5 0, ^f'J2 6 
0, 2 6 2*3cfctf2 6 4ti^^bC0^a6iC«l§^nTC'^ 

[oii7]034 (a) iz&i^x. mmt^m s 0 0 

tt, ft»h£f83rrsaafE£88 8 0 1 <t. SLSchJCfiE 
oT««*£fr5«»«8 0 2£cfctf 8 0 4<h, «J«g 

8 0 2 8 0 4lcJ^T&l&hict£-?TiIJR£n<5 
ISScOOBg^aHB 8 2 0-8 3 0 t, ^tl^o 

[0 1 1 8] 02 4»C*3^tS*7 r D-t^1t2 5 0 tt, ^^E 
U 2 6 0 l:»»StlT^§-yD^7A(:{EoT03 4 CD 

te^ntsfi 8oo cQit®^^^ 801-86 2m&mw 
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^8 0 1 -8 6 2«f«C»«"rS««**SLfc^ ; EU 1 
8 0 1- 8 6 2§^mLTfect^ o dC0J©-&. 03 4 
[0 119] »&-^48UigB8 2 0-8 3 OCD&^rte, A^? 

&stt*oTtti*s*fiK-r-&i«»a 1 6») cd 

FSSllS^MIg8 4 0-8 5 0S:^Tl^o Fl 
»«p-^ftffl31S8 4 0-8 5 0 ftuScDXOR 
M^MoTKiXORFMi, hfCfi£oT034 
10 (B) IZ^tlfc F US £*ffU -£"CDFM& CD 

mrftcDtH^^XOR (8 2 2 -8 2 3) i:J;oTXOR 

[0 1 2 0] 03 4 (B) (DFHScti. i£Ai|K i <hH 
^VX^lFMi, h^XORltM^iEia^t 
S^»$nfcA*X i ' ££XORT£XOR 8 6 2 

£+ »r-^SboxSi, hICckSIJ-r/A-f h 
£131 SubbyteSi. h(i = l, 2, • • • . 

8) "3-^A>f hjfias i. h<om*«r***«UT 

20 [0 1 2 1 ) 03 3*5J:IX3 4fC43tr>T, ^< >^-JU 
ri(D^^i^ItilcA^VX^FM i ntt«Br?#**t. 
7^f>fHHttHSft¥tttHFMou ttt«BST# 
03 5te. 7x-f X5^;i/S!ie^fc8«tc*frt-5« 

»©gOPa©V7^©Rf(Dfii^Lt^S 0 03 5 

mo u t &£m*vg&\,*m&te. 035 ic^^nt^s 

fc^-* (A) (B) fc^tT&<*n«R<Z>a 

(C) ^!)Mtl)^bT^^ 0 
30 [0 12 2] lot, 7i^fXf^aB^H itu^CD 
VX^«**aT^tC + ^>-fe;PT?*tt»/^ 03 6 
tt, 7x^fXr^©^fcgl{:^tt^TX^14^b 
VX^l+t>tJl/^TOg^^LTl^o 03 6fC 

>±JVt £>£TlCte03 6 tC^^tlTl/^J:o{C4g: 

■irM^^o £<D^x^fi*^>-tr;i/(D^j£te, spn 

znT^&&o\zmwLfrt><o~?7s2 i^u^m^vx^ 

?:MLT, 7x-fXfiH^fb(:^tt^)XOR{:J: 

[0 12 3] CtD^ffi^ffl^n^^fkM^^CDVX 
^FMou t«gl:/j:^o C(D^f££DE Sf©4 ^ 
^> K^±<DBg^JCiSfflT3if^te. 47^>HT*t 

^7c«^^^>K(D«^:T^ j r>-tr;i/-r^J;^/^ 

50 [0 12 4] ±j^<D*Jg^(C*5l^T«, ^TCD^O 



(17) 
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iZ. D P Atff%Tjj^%f-®lz\ZAt}mrf^-Vfr-?1km 

rmnit^miz^mtmm^nm-xi^^o 
[oi25] i3n ^ >T-)\s&<Dmmz&tfz>m* 



32 

[15 3] 



S3. ^>x-*ttfcl5tt*. H^X^jt&fiffi, DPAmi^ 
^J;ya»7X £ I6ffijg/Be>tf:« «a V R <M> 











2 


q=2 




S 


mS 


mS 


»S (3S-5S) 


RAMS 


R 


-R 


«R 


stR+M 


ROMS 


M 


qM 


2M 


-M 


3c£tt 


1 


*2 ,a 


2 72 


»2 128 



[0 12 6] ^4(1 DE S©*3£lCi5«-^@^-7X^ 



[*4] 



DPA^KD^, *3J:tfa 











q-2 




S 


-S 


»S (3S-5S) 


RAMS 


R 


-R 


srR+M 


ROMS 


8M 


16M 


-8M 


3c^t£ 


1 


»2 M 


»2 W 



[0127] I3M^14J;0, a^VX^lffiTIi 
J&SP^Wfi <^^RA MiS^l t <D IZML 

[0128] ±m<Dmmmm-T:te3nz7^ yf-jvm^ 

Or-^ffiK^WSPNillS^I:, DESKW7X 
[0 12 9] «±R9iL&XMi»ttUASI«l& UT^tf 



[0130] (Ate 1 ) »ffiw»aft^e£cfc 



(18) 
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ffioTA^»I«M^)t)(7)T^^, WE IKE* 

(msb 3 ) mess i ©#ffiwiiaid^s*j:txwe# 
»afp«rtss26o»«fiw»3i?p^a<fc. j»Ea»Kt£ 
is i KE*<7)Pt^fbgSo 

(we 4) »<ftw»a?p^a*j:^#»««*^as: 

^a<h. qfi^V^^^nfcffllf-^ C^Tqtt 

KTEasianfcittflDHft^-^Kia 

(WES) »«C©**»fta«:ftA, dO«»<Z)lif^b 20 

a<z>£*fct. -^coa©. *9EStffiwii3a«i#at, me 
fltE*»<o«^ba<o^n^n©fltEH)E^-^;i^ttra 

i;t>CDT*fe^>, WE4KE*<B«MMbS». 

(WE 6) 7x^an-5i©atf-^Ms [x] 

tU VX^$n^jSI©f-yMSj [xXOR 
ci, j] XORdi, j ( j = 0, 1, • • • , 1 
5) <fcbifc<h*K, (co, jXORci, j) VXO 
R (c i. j XOR c 2, j ) V • • • V (c 

q-2, jXORCq-2, j ) = (1111111 30 

i) 2-e^>^>, mz4iz$zm<Dffgmtmm:<, 

(WE 7) ^-y;Koa<o»q = 2 h-F&M&iz. V 

X^$n§i[©a£r-^§:S [x] tu VX^ 
n/ijSBWf-^MS j [xXORc i, j] XO 
Rdi, j (j=0, 1, • • 15) 
K, co, jXORci, j= (10110101 

o) 2ifcu (oiioioioi) 2t*^ WE 4 
KE*<B«MMbK«. 

(WE 8) vx^$n^>mf(7)g^^-y;i/^s [x] 

7X^$nfcjSi©r-yMSj [xXOR 40 
c i, j] XORd \, j ( j =0, 1, • • • , 1 
5) £Lifc<i:*K, (do, jXORdi, j ) V (d 
1, jXORd 2 , j) V- ■ -V (dq-2, jXO 
Rdq-2, j) = (11111111) 2t^^) 4 W 

SE4 KE*cD»&-^{bgB. 

(WE 9) ME#»»*«*att-9-:7A< hfgt^ 
3 *^a<h£JM.*. ttE4fcE«OMft8 

Mo 

(WEio) as*fs£-r*a»36£»#a£, a£*y so 
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lctS^$tifc«ft©i«-^fb»i:, *Easi:a^T(l»E 
Ji^cDBt-^fbSBcD*^ l ^£S«T£StRS§<^ £11 

fi9E«»(Z)«F-^fb«<z)*^»a, SNffiwi&a?D^a*5 
(WEi i) ffifEa«?snfc«-*fbBB©a9E#ffiwift 
afp^aoA^^ftffiWttaftSrtsfc^-efts, we 

i o KE*<o*iMHbg«o 

(WE 1 2) NE^tUKXHfftli. H5fe^-y;KC 
ffoT«IE*ll»«*#a©AA**»»««t*t)0 
WE l 0 KE*E>i*-*HbSK. 
(WEI 3) S9E1S»OBff^b«a)^&^tt, -^Rg-^ 

fbg(5^<7) xti t mfemcDitmwmmm *<tz>m2 <omm 

WE 1 0 KE*(OffiF*tfl:S 

Mo 

(W8E 1 4) MEa*?^n^fflP^-fb^cOHuE#ll^ 

si^an, mj£T-7)iizmr>TmmmKmm^&(D 
Ajj&$mm&&-r2>*><D'c$>z>. weioke*©* 
^fb^^o 

(we 1 5 ) m$zm%t<Dm^<t&<D&* \zmfk<D*m 

fba^^^"C^^9, WE*»©*#flSft©«4rt4, 
£<t3»ffiWIWS?n^a<!:* Kf-7>t:ffi^TAtl 
WE l 0 IcEttoitreflsSB. 

(we i 6) a»srfs^-rsa««*«^a<t:«»<o 
i©^{bat*aA/ti«^fbsa-e*^T, i»e*S(bi* 

"©AAttiWE#«»*«^a©mA^«F^snTj3D. 

WE#ll»«*¥iHi, qfi<BB^<l (C^TqMS 
Tfc£>) ilriEa&K^oTitijEqfScQS^ftcD^tf) 

i ^Srasj-rsa^s^ *ttEaRanfcH5e««t*© 

(WE 1 7) H«E#«l»^SI^a«. SSK, ituE# 

%m®:^&<Dtp<D i ^©sraKT^awsg^sr^-r^fe 

WE 1 6 tcE«OBff-^fbSfio 

(WE i 8 ) mEascofflp^Yba^-^n-en^mE* 
«»«»faoi^f-^niigi;T*5, wei7k 

E^co^fbgSo 

(we i 9 ) HMEsa^ue^ba«c*5frt-&a3a-r s« 

R<7)aK;fe^Tvx^£^>ir;i/-f WEI 6KE 

(we 2 o ) HjEisfaoie^fba«c43^THMEi£a^ 



(19) 
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ftt>ti&. me i 6 izmmvmmtmmo 

(f+B2 1) a»S584tsa»MSS^S<!:)l»0 
OA*JiWE#l»**«^a(Z)Hl*«c:|g'&$nT*5 0, 
l^dSftfcMomtftaii, ffflEaSclcafoTiWE 

a, WEi**a)rtF^ka<D*^«*ft©Bff-^fbR*^r 
mwft^mvm 2 ©A*ttME#»*«»i^aoaiA(c: 

(#E2 3) KfE#IIM»¥g«, S^fi£itcD#E 

<fiwna» t A*©#ffiw»3a» £ <t *8ij<z>sMfi»Mi 
?n^g^, *9E#*l**ai#aort»Jc, @>£^-:/;u 

-TZ>$><DT&Z>, #E2 2 JcEtR^rtP-^ffcSB. 

(tt82 2 4) vx^^n^Hucoa^^- y;i/^s 

j [x] £U VX^^tlfcjSl^f-yMSj' 
[xXORci, j] XORdi, j ( j = 0 , 1, • 
• 7) £V,tz.t.^\Z. (do, jXORdi. j) 
V(di,jXORd2, j ) V • • ■ V ( d 30 

q-2. jXORdq-2, j) = (1 1 1 1) 2T& 

#E2 2 izmm&m^itmmo 

(f^teE 2 5) «F^ftSI«fC45liTfflliSfc«)<3!)E1tli 
©1^10*0 1 O^IJJt^Xr 7^ (u^tqiil 

l£T&£) <h, WE»K*nfcH^M<t»<o#ffiW»3a 
W<hA^fiCOgfffiWife3aiaS:di'5A^!yy<!:, ffiEaft 
CSE-^Tq^VX^^nfciSr- :/;i/<£>4>6Q 1 
MR-TZ^ry?*:* ifflE»«S*lfc 1 ffl^HJE^- ^ 

(fits 2 6) »iP^fciiafc*5iiTffii^fc*coEifti« 

ftSnfcl*^{t^JBlC«l£oT, A^ffl^ffff^bLTtti^ 
t^T7^, £*fr£i*\ B^Eu&^b-rSA^^^ 
tt. HSfichacoftffiM^aftchA^fi^ffiMi&aW 
^ch^X^^^ch. lfflOH^^— y;Kc«EoTA*fi 

50 
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(ME2 7) ^nitmmz&^Tmi^fc&mzmM 

2 ©A*ti«>sfflfiw»aiD* <t 577 * y 
**ff$-fr, WEifi9»«ift-r«»A^u/^i. aft 

•©ftffiw^afttA^MoftffiwiiJiwtctsxT 1 ^ 

WEa»(cMiif*^e>3h.fcH3e5 : — ^;Hc=E£oT 

(#E2 8) «F-^ft»IHJC^triTfflli-5fc«)<Z)E1tl« 
^KT^fb^JiScD*^ 1 O^S&f^XT^y yt, mJfBS 
&mi&?Z>X?ry7£i. **fr$1*\ ffirE«F^{t"r* A 
^X°ch, Sl(DA*ittWEffl*7?***2 0[)A*<i<Z) 

n^7Ao 
[0131] 

[01] Bill HlttAT- h*— K«Ci3frt-5*ii» 

[0 2] B2H AS!Wa:*ii*i«-^Tffll^ns«|X 
OR^LTl^c 

[03] i3ii A9n&^atti»Tfflir^n«iK« 
[04] B4it MMmtexmmmn-cm^znzim 

[0 5] 05*2. !Ktt»ttO^(7)ttXOR0tff (0 2) 

t&MM^m (04) (TDm^-^T^^Bg^bco^J^^L 

[06] B6n 0 5 \z&i,fz>t±Mmmftmm^mw 

[07] 07 (A) 43<£tf (B) ta, ffemtzfa-ty+y 
^Iti^ifW^iLT^^o 0 7 (C) fiX/H 

^^t^iAMM^i^LT^^ 07 

[0 8] @8n m4<Dmnik&<Dwimz2z><Dmm^ 
[09] B9n 0 4<7)i«^bS{c*3W^«^m»ft« 

[H10] H10I1 agc^A^fEffi(ci:^jaSco«^ 



(20) 
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0£^LTV>£o 
[BlUHllH a*VX^«[ffitCj:^liXOR«: 

[Hi2] 0i2n tL%c*?7sf7mmz£z&Mm$k& 

[B13] B13H &R^X^Iiffifc J: 

[014] B14H DPAM^^IS©Ng7< 

[B15] B15H ;Uffi<Z)»SB*K sec 10 

d^ffi^BKo, Ki, • • KN^Mt^fi^i 

[016] 01611 -tf^/W hllS ubbyteC 

[017] 017(1 hSh i f t CD$lf££^LT 

[018] 018H ^7h37AJ!!IMixedc 

[019] 019H Bl 4C0il«(DNS^-f >^-;U 

[0 20] 02OH 019(7)16 PCO S b o x T^ffl 
2*1*5 N e wS b o x ^LTt^„ 

[021] 02in *5£m\z£&m i cd^-t ^<£>r&^i 

[0 2 2 ] 0 2 2 H 0 2 1 Ci)tt§lXOR(OM^ 

[02 3] 023(1 02 1 iC&tf 3#Sff^mcD#?f& 

[02 4] 0 2 4 H *^§g{Cj:^^2^^<yc7)»&-^ 30 

[02 5] 02 5H 02 4t;i;mt5»XOR<Z)«JG££ 

[02 6] B26H 02 4 fc;fctt*##*aE»<D«fS 

[027] B2 7H 02 icomi -t^ommtm 

[02 8] 02 811 02 7 fd&tf^ SubbyteCD 
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* [0 2 9] 0 2 9(1 0 2 1<F)%\ <D$>C7<DV%mkm 

[03 0] B30H 02 9 \Z&rt%> Subby teOD 

[0 3 1 ] 0 3 1 (1 0 2 4 (D% 2 (D^^i 7<D*6mtm 

[03 2] 0 3 2 H il^^DE S«^LT^ 

[03 3] 03 3H 02 9WB^^IS^7x^f 

[03 4] B3 4H 03 1 (Dm^^^M^y x.-T 

[03 5] 03 5(1 7x-f X-r;US!WP#{b361HJC*3tt 

[03 6] 03 6(1 7x-fXx^S!*-*{tK«iC*5frt 

1 0 0 fJ&^ftJgg 

i o i vsmtmmm 

1 0 3 £Ufc5££2i 

104, 105 mmm 

1 0 6. 1 0 7 lilXOR 

200 mmt^m. 

2 0 3 3U&fg£§§ 

2 0 8-2 0 9 Bt-^ffc&lSgB 

2 0 4, 2 0 5 UXOR 

2iis 213 wmm 
300 v§mtmw 

3 10 ^ i Wt<D$±W 

3 1 1 8N~ i&oimw 
3 0 3 &*S8£g 

305, 329, 339, 379, 399 WWkWi 
302,331,333,371,373,383 O 

xr mmmmwm 

334 Subbyte 

3 3 5 Shift 

336 Mixedcolumn 



1] 



[0 2] 



[0 3] 



[0 6] 
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[0 4] 



[H5 3 




w-:Sbox 



M- 



[08] 



[0 7] 



(A) 




8WB 



(B) 




(D) 



W:lSbQK 



3l_ 



w, 



Jfcl_ 



[011] 



XT 



RKj 



Ri -+ 



zrr 



ROi 



[09] 



K C 

M <±> 



T 



W, 



— J 3*1 K 



1 0] 



a* 




Xotf 



Rat 



**** 



015] 
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[0 12] 



[0 13] 



(A) 



Ri 



j—ROi 



Xi' 



1 Xl'o 


Wl' 0 


zi' 0 ; 














• 






1 












Xl'u-1 






1 

■ — 







Zi' 



Ri -!- 



wi 



Wl 



u-] 



NewSbox 



ROi 



(B) 



Ri 



Wl' 



Sboxger^ 
7 — r 



u-i 



Sboxgqy, 



ROi 



ROi 



[HI 4] 



12 2] 



N-l @ ItUXU 



K l (iF-Q t l v ... l N-2) 



Subbyte 
(by 500) 



r ^^ *L tBy» 1^-109 



3i^CO Rijndael fttS 



Xi' 



[02 5] 
Ki 



FM 



'Zi' 
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[016] 



[02 1] 



J28 



(128-bit) 



(128-bit) 



128 



» X ' J S(x) 



4^1 



S(x) 



MM, 



Subbyte 



[0 17] 



4^ 



y 0 



■f 



yi 



■f 



128 



^-ci-feyV I I > -4 y I | RAM I I ROM 



in r 

1 my M jos 



(128-bit) 



yi"^ 



(128-bit) 



yr^J 

= 13i - 4 (mod 16) 



xr- 




B2 8] 



(128-bst) 



(l»ttt) 



Shift 



[018] 



12 4] 



puftipiiottjon 



— ^ over<2^2*) 



128 



5^ 



4^ 



y 2 8/ 



y« 



02 03 01 Off^ 



01 02 03 01 
01 01 02 03 



VyJ 01 Ot 02j^J 
«SMBfe Ju *i rfU il 



204, 



128 



(128-bit) 



203 



2fiQ 



RAM 



ROM 



Mr 



209 



te 



13 207 



^ «H»* 



(24) 
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[0 19] 




(25) 



*$§fj2 002-366029 



[02 0] 



[03 0] 




x 

(128-bh) 



128 



(12*-tit) 



Subbyte 



NewSbox 




(26) 
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[02 7] 

N-1 S ttyfiU«U..,N-2) 




3 



300 



[03 1] 



(IM-h»0 



1 | FhfiQ. ' 



p fig) * ***** _ _ 



:521 



523 <625 <526 <S27 
N-1 B WgL(H).l F .>2) 



502 521 523 626 626 



T527 



623 

£13 n-j»@©M 



629 



Shift 




T 

604 



MX 



500 



[03 2] 



[03 3] 




(A) 













FBHt K- 




r ♦ n 



ma 



(B) 



(B) 




-^764 



"^-767 



(28) 



&m 2002-366029 



[03 4] 




7P> b^—zscomz 



(72)5S9I# Mm mm F^-A(##) 5J 104 AA4i AA47 FAOO JA03 NA02 



